SITEONE LANDSCAPE SUPPLY, INC.

The Company disclosed a July 2020 ransomware attack on its IT systems in its 10-K Item 1C. The incident resulted in no material financial impact. The Company maintains a comprehensive cybersecurity program including NIST framework alignment, third-party penetration testing, employee training, and incident response retainers. No specific malware family or threat actor was named.

SiteOne Landscape Supply, Inc. reported a data breach to the California Attorney General. The incident occurred between July 2 and July 14, 2020. The provided notice attachment contains only generic advice on credit monitoring and identity theft prevention, lacking specific details on the nature of the breach, data types exposed, or number of affected individuals. The filing is classified as an initial notification.

SiteOne Landscape Supply, Inc. experienced an external system breach between July 2, 2020, and July 14, 2020, discovered on September 4, 2020. The incident compromised financial account or credit/debit card numbers along with security codes, access codes, or PINs for 27 Maine residents. The company provided written notification to affected individuals on October 30, 2020, and offered one year of credit monitoring and identity theft protection services through Experian.

SiteOne Landscape Supply, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2020-10-30. The breach occurred from 7/2/2020 to 7/14/2020. 5 Montana residents were affected.